CVE-2025-54066: DiracX-Web is vulnerable to attack through an Open Redirect on its login page

July 17, 2025

An attacker can forge a request to redirect an authenticated user to any arbitrary website.

References

github.com/DIRACGrid/diracx-web
github.com/DIRACGrid/diracx-web/commit/eba3b7bc4f9d394074215986e6d3c15b546b25d5
github.com/DIRACGrid/diracx-web/security/advisories/GHSA-hfj7-542q-8fvv
github.com/advisories/GHSA-hfj7-542q-8fvv
nvd.nist.gov/vuln/detail/CVE-2025-54066

Code Behaviors & Features

Detect and mitigate CVE-2025-54066 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →